Privacy

This notice explains what happens to personal data when you use nycbox.org.

Who is responsible. The controller of this site is nycbox. You can reach us through the contact page about anything in this notice.

What the form collects. The contact form asks for a name, an email address, a subject and a message. You choose what to put in the message; please leave out anything sensitive that we do not need in order to answer you.

Why, and on what basis. We use what you send only to read your message and reply to it, and to correct an entry if your message shows that it is wrong. The basis is your consent, given by ticking the box, and our legitimate interest in keeping the guide accurate.

How long we keep it. Correspondence is kept while the exchange is open and for up to twelve months afterwards, then deleted. A message that leads to a correction may be kept longer as a record of why an entry changed, with contact details removed.

Server logs. Our host records ordinary technical data when a page is requested: an IP address, a timestamp, the address requested, the browser string and the referrer. Logs exist for security and for keeping the site running, and they are kept for a short period before deletion.

No tracking. There is no analytics on this site, no tracking pixel, no advertising, no third-party cookie and no social widget. The site stores nothing in your browser: no cookies, no local storage, no session storage. One script is loaded, and all it does is open and close the menu on small screens.

Hosting and processors. The site is served by a hosting provider that processes data on our instructions under a written agreement, and email is handled by a mail provider on the same terms. We share nothing else with anyone and we do not sell data.

International transfers. If a provider processes data outside your country, the transfer is made under safeguards recognised by the applicable data protection law, such as standard contractual clauses.

Your rights. You may ask for access to your data, for correction, for erasure, for restriction of processing or for a copy in portable form, and you may object to processing. Where processing rests on consent, you may withdraw it at any time; that does not affect what was done beforehand.

Complaints. If you think your data has been handled badly, you may complain to the data protection authority for the place where you live or work, whichever applies to you.

Last updated: July 2026.